Trending repositories

201.Yamato-Security / hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

• dfir
• threat
• hunting
• windows
• event
• logs
• +14 more

202.ory / kratos

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

• identity
• identity-management
• user-management
• users
• user
• login
• +5 more

203.Col-E / Recaf

The modern Java bytecode editor

• java
• bytecode
• bytecode-engineering
• reverse-engineering
• jvm-bytecode
• decompile
• +8 more

204.javascript-obfuscator / javascript-obfuscator

A powerful obfuscator for JavaScript and Node.js

• javascript-obfuscator
• obfuscation
• uglify
• javascript
• protection
• obfuscate
• +14 more

205.BlessedRebuS / Krawl

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception
• honeypot
• kubernetes
• +11 more

206.Bubka / 2FAuth

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

• otp
• 2fa
• 2factor
• totp
• hotp
• self-hosted
• +4 more

207.nilsteampassnet / TeamPass

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.

• php
• access-control
• audit
• browser-extension
• compliance
• credentials
• +14 more

208.dwisiswant0 / apkleaks

Scanning APK file for URIs, endpoints & secrets.

• mobile-security
• android-security
• reverse-engineering
• bugbounty
• static-analysis
• apk
• +2 more

209.lief-project / LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

• reverse-engineering
• malware-analysis
• binary-analysis
• parser
• modification
• executable-formats
• +13 more

210.Ullaakut / cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

• penetration-testing
• security
• hacking
• infosec
• rtsp
• cctv
• +5 more

211.Konloch / bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• java-decompiler
• apk
• java
• procyon
• cfr
• fernflower
• +14 more

212.beefproject / beef

The Browser Exploitation Framework Project

213.RsaCtfTool / RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

• rsa-attack
• rsa
• cryptography

214.s0md3v / XSStrike

Most advanced XSS scanner.

• xss
• xss-scanner
• xss-exploit
• xss-bruteforce
• xss-python
• xss-detection
• +2 more

215.future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go
• linux
• freebsd
• +14 more

216.Mail-0 / Zero

Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord

• ai
• email
• privacy
• security

217.wpscanteam / wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

• wordpress
• wpscan
• security
• security-scanner
• hacking-tool
• scanner
• +2 more

218.pardeike / Harmony

A library for patching, replacing and decorating .NET and Mono methods during runtime

• csharp
• patcher
• detour
• detours
• runtime
• mono
• +5 more

219.AGWA / git-crypt

Transparent file encryption in git

220.cert-manager / cert-manager

Automatically provision and manage TLS certificates in Kubernetes

• kubernetes
• letsencrypt
• tls
• certificate
• crd
• hacktoberfest

221.SwiftOnSecurity / sysmon-config

Sysmon configuration file template with default high-quality event tracing

• sysmon
• threatintel
• threat-hunting
• sysinternals
• windows
• netsec
• +2 more

222.JonathanSalwan / Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

• reverse-engineering
• symbolic-execution
• binary-analysis
• program-analysis
• taint-analysis
• binary-translation
• +5 more

223.google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

• security
• linux-namespaces
• linux
• process-isolation
• seccomp-bpf-policies
• chroot

224.cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

• network-security
• pcap
• security
• arkime
• cybersecurity
• infosec
• +7 more

225.hugsy / gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

• python
• exploit
• gdb
• linux
• reverse-engineering
• ctf
• +13 more

226.horsicq / DIE-engine

DIE engine

• signature
• reverse-engineering
• unpacker
• yara
• elf
• program-analysis
• +5 more

227.thinkst / opencanary

Modular and decentralised honeypot

228.bailey27 / cppcryptfs

cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.

229.chaitin / xray

TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use

• security
• vulnerability
• vulnerability-scanner
• passive-vulnerability-scanner
• xss
• sqlinjection
• +1 more

230.nccgroup / ScoutSuite

Multi-Cloud Security Auditing Tool

• aws
• azure
• gcp
• cloud
• security
• auditing

231.beelzebub-labs / beelzebub

A secure low code deception runtime framework, leveraging AI for System Virtualization.

• cybersecurity
• security
• honeypot
• framework
• go
• research-project
• +14 more

232.pyca / cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

• python
• cryptography

233.mandiant / flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

• malware
• deobfuscation
• strings
• flare
• malware-analysis
• gsoc-2026

234.GrapheneOS / hardened_malloc

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library
• memory-allocator
• memory
• +4 more

235.java-decompiler / jd-gui

A standalone Java Decompiler GUI

236.stamparm / maltrail

Malicious traffic detection system

• security
• malware
• intrusion-detection
• sensor
• python
• network-monitoring
• +2 more

237.keeweb / keeweb

Free cross-platform password manager compatible with KeePass

• keeweb
• keepass
• security
• password-manager
• password
• electron
• +1 more

238.golang-jwt / jwt

Go implementation of JSON Web Tokens (JWT).

• go
• golang
• jwt
• auth
• ed25519
• security

239.str4d / rage

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.

• cli
• encryption
• zero-configuration
• secure-by-default
• unix-philosophy
• curve25519
• +5 more

240.pic-standard / pic-standard

Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.

• action-proposals
• agentic-ai
• agents
• ai
• cli
• crewai
• +14 more

241.aboul3la / Sublist3r

Fast subdomains enumeration tool for penetration testers

242.ayoubfaouzi / al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• anti-analysis
• anti-debugging
• anti-sandbox
• anti-vm
• anti-emulation
• code-injection
• +5 more

243.m0bilesecurity / RMS-Runtime-Mobile-Security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

• mobile-security
• android-security
• frida
• reverse-engineering
• ios-security

244.dfir-iris / iris-web

Collaborative Incident Response platform

• forensic
• incident-response
• csirt-tooling
• python
• digital-forensics
• digital-forensics-incident-response
• +2 more

245.justauth / JustAuth

Translated🏆Gitee's most valuable open source project 🚀:100: A small, comprehensive and elegant open source component for third-party login. It currently supports authorized login via third-party platforms including Github, Gitee, Weibo, DingTalk, Baidu, Coding, Tencent Cloud Developer Platform, OSChina, Alipay, QQ, WeChat, Taobao, Google, Facebook, Douyin, LinkedIn, Xiaomi, Microsoft, Toutiao, Teambition, StackOverflow, Pinterest, Renren, Huawei, WeCom, Kujiale, Gitlab, Meituan, Ele.me, Twitter, Feishu, JD.com, Alibaba Cloud, Ximalaya, Amazon, Slack and Line. Login, so easy!

• justauth
• oauth2
• qqlogin
• googlelogin
• weixinlogin

246.evilsocket / pwnagotchi

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

• ai
• deep-reinforcement-learning
• wpa-psk
• handshakes
• bettercap
• deep-learning
• +1 more

247.CTFd / CTFd

CTFs as you need them

• ctf
• security
• education
• flask
• ctfd

248.ivre / ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

• bro
• scans
• nmap
• network
• network-discovery
• scan-ports
• +14 more

249.KuroLabs / stegcloak

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

• cryptography
• steganography
• compression
• functional-programming
• ramdajs
• hacking-tool
• +10 more

250.olafhartong / sysmon-modular

A repository of sysmon configuration modules

• sysmon
• dfir
• threat-hunting
• mitre-attack
• modular
• security-tools

251.supertokens / supertokens-core

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

• authentication
• session-management
• login
• supertokens
• java
• signin
• +13 more

252.guardicore / monkey

Infection Monkey - An open-source adversary emulation platform

• penetration-testing
• security-tools
• security-automation
• infection-monkey
• adversary-emulation

253.threat9 / routersploit

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework
• routersploit-framework
• exploits
• +7 more

254.bitnami / sealed-secrets

A Kubernetes controller and tool for one-way encrypted Secrets

• kubernetes
• kubernetes-secrets
• devops-workflow
• encrypt-secrets
• gitops

255.commixproject / commix

Automated Αll-in-One OS command injection exploitation tool.

• python
• command-injection
• detection
• exploitation
• pentesting
• vulnerability-scanner
• +4 more

256.onetimesecret / onetimesecret

Keep passwords and other sensitive information out of your chat logs and inboxes.

• privacy
• onetime
• secrets
• chat
• email
• messaging
• +1 more

257.spiffe / spire

The SPIFFE Runtime Environment

258.momenbasel / htb-writeups

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity
• ethical-hacking
• hackthebox
• +14 more

259.umputun / remark42

comment engine

• commenting
• comment-system
• self-hosted
• commenting-engines
• comments-widget
• remark42
• +1 more

260.tclahr / uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage
• linux
• aix
• +14 more

261.dstotijn / hetty

An HTTP toolkit for security research.

• mitm
• proxy
• http
• pentesting
• infosec
• bugbounty

262.avast / retdec

RetDec is a retargetable machine-code decompiler based on LLVM.

263.openiddict / openiddict-core

Flexible and versatile OAuth 2.0/OpenID Connect stack for .NET

• openidconnect
• oauth2
• aspnetcore
• dotnet

264.aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

• ebpf
• linux
• bpf
• security
• golang
• docker
• +2 more

265.Volmarg / personal-management-system

Your web application for managing personal data.

• dashboard
• dashboards
• manager
• symfony
• mit
• self-hosted
• +14 more

266.pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

• security
• password-expiration
• password
• password-safety
• communicate-passwords
• password-pusher
• +13 more

267.jaksi / sshesame

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang
• security

268.googleapis / google-api-nodejs-client

Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.

• google
• google-api
• nodejs
• client
• client-library

269.FrancescoStabile / numasec

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty
• cybersecurity
• devsecops
• +14 more

270.nextauthjs / next-auth

Authentication for the Web.

• nodejs
• nextjs
• oauth
• react
• authentication
• nextauth
• +12 more

271.Yara-Rules / rules

Repository of yara rules

272.cloud-custodian / cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

• aws
• compliance
• cloud
• rules-engine
• cloud-computing
• management
• +8 more

273.kimci86 / bkcrack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

• crack
• zip
• multithread
• attack
• plaintext-attack
• ciphertext
• +5 more

274.a1ex4 / ownfoil

Nintendo Switch library manager, with automated management tasks, serving your library to multiple supported clients on your Switch, with shop customization and multi user authentication.

• tinfoil
• atmosphere
• homebrew
• switch
• nintendo-switch
• self-hosted

275.skeeto / endlessh

SSH tarpit that slowly sends an endless banner

276.turbot / steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

• steampipe
• postgresql
• postgresql-fdw
• cloud
• security
• aws
• +14 more

277.win-acme / win-acme

Automate SSL/TLS certificates on Windows with ease

• acme
• certificates
• windows
• iis
• exchange
• rds
• +4 more

278.evyatarmeged / Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

• reconnaissance
• scanner
• vulnerability-assessment
• vulnerability-scanner
• enumeration
• pentesting
• +9 more

279.WithSecureOpenSource / chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

• attack
• rust
• security
• threat-hunting
• blueteam
• chainsaw
• +7 more

280.sleuthkit / sleuthkit

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

• sleuthkit
• tct
• ntfs
• forensics
• incident-response

281.elceef / dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

• phishing
• typosquatting
• domains
• dns
• osint
• idn
• +6 more

282.extremecoders-re / pyinstxtractor

PyInstaller Extractor

• python
• pyinstaller
• decompile
• reverse-engineering
• pyinstaller-extractor
• python-decompiler
• +2 more

283.korcankaraokcu / PINCE

Reverse engineering tool for Linux

• gdb
• cheat-engine
• reverse-engineering
• injection
• memory-hacking
• hex-editor
• +10 more

284.wolfSSL / wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

• ssl
• tls
• cryptography
• security
• openssl
• tls13
• +14 more

285.Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

• blue-team
• detection-engineering
• edr
• endpoint-detection
• etw
• incident-response
• +14 more

286.awslabs / git-secrets

Prevents you from committing secrets and credentials into git repositories

287.CryptoSignal / Crypto-Signal

Github.com/CryptoSignal - Trading & Technical Analysis Bot - 4,100+ stars, 1,100+ forks

• technical-analysis
• bittrex-api
• crypto
• bitcoin
• ethereum
• trading
• +14 more

288.ReversecLabs / drozer

The Leading Security Assessment Framework for Android.

• drozer
• android
• security
• pentesting
• java
• mobile
• +2 more

289.JonathanSalwan / ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

• reverse-engineering
• rop
• rop-exploitation
• rop-gadgets
• binary-exploitation

290.uxmal / reko

Reko is a binary decompiler.

• decompiler
• dotnet
• decompiler-engine
• decompile
• reverse-engineering
• x86
• +7 more

291.motdotla / dotenv

Loads environment variables from .env for nodejs projects.

• dotenv
• environment-variables
• javascript
• node
• nodejs
• secrets
• +5 more

292.niklashigi / apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

• cli
• reverse-engineering
• android
• apk
• mitm
• certificate-pinning
• +2 more

293.dyc3 / steamguard-cli

A linux utility for generating 2FA codes for Steam and managing Steam trade, market, and other confirmations.

• steam
• steamguard-cli
• linux-utility
• sda
• 2fa
• steambot
• +1 more

294.coinpaprika / coinpaprika-api-go-client

Official CoinPaprika API Go client — coin prices, tickers, OHLCV, exchanges, and global market stats.

• api-client
• bitcoin
• blockchain
• coinpaprika
• crypto
• cryptocurrency
• +4 more

295.RhinoSecurityLabs / cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

296.linuxserver / docker-swag

Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.

• hacktoberfest

297.leibnitz27 / cfr

This is the public repository for the CFR Java decompiler

298.dont-be-evil-company / kulala.nvim

A fully-featured ⚡️ HTTP/GraphQL/gRPC/Websocket-client 🐼 interface 🖥️ for Neovim ❤️, that supports the Jetbrains .http spec (with full scripting support).

• graphql-client
• neovim-plugin
• rest-client
• curl
• http-client
• lua
• +14 more

299.google / grr

GRR Rapid Response: remote live forensics for incident response

300.OTRF / ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

• threat-hunting
• sysmon
• hunting-campaigns
• hypothesis
• hunting
• dfir
• +3 more